Kraig R. Pepper, D.O., P.A.

Kraig R. Pepper, D.O., P.A. (TX) reported to HHS OCR on 2017-09-26 an Unauthorized Access/Disclosure affecting 653 patients. CoPilot Provider Support Services, a business associate lacking a formal BAA at the time, suffered a data security incident that exposed ePHI including patients' names, addresses, dates of birth, claims information, diagnoses, and Social Security numbers. Following OCR's investigation, the CE executed a BAA with CoPilot, revised its authorization forms, and provided one year of identity theft protection to affected individuals.

Affected (this filing): 653